Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: TwBDjhek5qJbFE0+jyRQNd6GsczIT9Fdm/zjJMR5UOc=
Subject key identifier: 95:8F:3D:F5:29:9B:11:C9:A0:B8:A6:39:52:40:8C:11:93:6E:D8:FC
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 019DA3AF070801226F753FC1A4EC25160C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 191E
Signing time: Sun 19 Apr 2026 03:00:49 +0000
Manifest this update: Sun 19 Apr 2026 03:00:49 +0000
Manifest next update: Mon 20 Apr 2026 03:00:49 +0000
Files and hashes: 1: 1-gD4Hq6k3_IBwrhpxMMG_5-Bhrc.roa (hash: D/5u0x0tc9amqj7LxNMrUHo2Ohz0yRVArWNlJ2DKIqA=)
2: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (hash: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE=)
3: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (hash: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU=)
4: FQaFiTcf67x6YrpuBrF65w_8hug.roa (hash: CNjoRJ7uhvB1XswkiORZT6na1N/pFMt+GGKFD8Y6iH0=)
5: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (hash: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs=)
6: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (hash: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII=)
7: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (hash: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o=)
8: SaQLJTN3Tu68cjM5ZHbz4FW_mpg.roa (hash: WsziI7VNkNBzfhBKLzBNR8KU16oQ4434je9QUJEHNAU=)
9: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: QyQUgTvQZ8MQBrqoeKwcF2llckd75VHqLUHa0xAQj3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:07:08:01:22:6f:75:3f:c1:a4:ec:25:16:0c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Apr 19 03:00:49 2026 GMT
Not After : Apr 20 03:00:49 2026 GMT
Subject: CN=958f3df5299b11c9a0b8a63952408c11936ed8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c3:30:50:e9:6d:c0:f7:b7:9c:25:6e:b3:bb:
6b:6d:90:de:72:3d:ca:8d:a2:ae:55:75:95:c3:e0:
f8:00:a3:96:d4:25:65:ad:68:6b:9b:a5:af:56:3f:
89:f2:dc:11:d2:8f:bf:78:63:e7:c6:8b:c2:20:c1:
44:48:a2:7c:52:b9:9c:c2:ac:b2:5f:24:86:b6:23:
29:0f:07:6c:56:bf:cc:2d:4e:b9:a1:8e:24:64:46:
a9:3d:a7:7e:75:6a:b3:9c:30:1f:e0:8a:c3:17:5a:
7a:43:ae:dd:8c:d1:5d:99:f5:2d:26:ea:96:57:05:
01:24:e4:40:0d:7e:31:56:0d:1a:35:99:fa:a0:7d:
0e:d3:21:da:e2:c6:08:18:c7:96:91:30:74:bd:4b:
fc:07:c0:a0:b5:4a:1f:13:67:04:64:7e:df:22:1f:
f8:cf:58:23:c1:6a:70:03:f7:af:18:59:d8:7b:5c:
b9:31:e8:85:69:0e:ad:4a:89:9b:ea:c9:fa:d2:54:
1c:f5:92:35:0f:c1:e4:98:9c:85:73:81:0e:bb:d2:
61:c0:63:b2:11:e6:72:95:02:06:18:23:d8:0e:cd:
95:1b:63:10:5d:4b:3f:2e:a8:0d:06:95:e5:7b:49:
18:6d:a1:4a:ea:23:7a:f1:2c:ce:20:ca:ed:66:9e:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8F:3D:F5:29:9B:11:C9:A0:B8:A6:39:52:40:8C:11:93:6E:D8:FC
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7a:97:83:39:bb:a5:d3:7d:9a:98:c7:50:bd:e1:bf:66:3a:
8e:08:ae:37:64:6a:f5:a7:b8:24:40:bb:8a:dc:48:38:9a:0d:
3d:88:ff:af:7d:5d:0c:2f:5b:25:93:53:a9:05:d9:91:a6:f6:
a2:43:46:ef:01:2d:43:35:82:1f:d5:a7:06:9d:18:5f:b7:59:
ae:0f:77:2e:a8:14:89:d4:00:17:92:e5:a6:7a:72:31:35:2d:
7d:8b:69:ef:1b:cf:03:4c:a6:20:97:83:54:b5:0a:14:60:25:
3b:53:fc:b6:65:36:1c:b2:b0:07:d6:91:30:17:77:f8:ca:b1:
b3:b0:90:7d:05:36:98:03:6a:ca:ed:a6:c9:14:58:46:6b:13:
2a:64:02:3c:bb:1d:75:36:39:06:05:f2:b9:be:0a:38:a8:52:
32:2e:23:84:67:0c:eb:60:e9:12:cc:00:17:87:f8:15:18:b9:
ba:db:fc:00:b7:2d:84:5f:82:3b:7a:30:48:e7:fc:90:87:c2:
94:13:36:03:f3:55:e3:ae:b7:cd:2b:29:46:97:1b:54:72:ca:
1f:d5:83:07:2d:9e:11:14:2a:10:7a:1a:5b:44:5b:db:cb:d9:
51:55:5b:cb:3b:a2:e1:82:d7:99:c8:f7:42:d7:23:10:02:b6:
a7:7f:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:39 2026 by rpki-client